Hello!
A little background
I am writing a framework to execute static android security analysis tools, and I would like to inlcude FlowDroid in it to show what it can do!
Issue
I have a (small) apk, which I test with to see if my framework works okay.
I found that Flowdroid does not work with my test apk:
[main] ERROR soot.jimple.infoflow.android.SetupApplication$InPlaceInfoflow - No
sources found, aborting analysis
My apk is malware, it has sources and sinks, confirmed by multiple analysers.
e.g.: I have used IccTa (with IC3), which also uses soot. There, I got a welcoming
[main] INFO soot.jimple.infoflow.data.pathBuilders.ContextSensitivePathBuilder - Obtainted 3
connections between sources and sinks
I thought: Maybe it is because of the SourcesSinks definition text file (maybe IccTa uses more fitting source/sink rules for this apk), but: After launching flowdroid with the SourcesSinks-file of IccTa, the error persisted.
Question
Do you know, by any chance, how Flowdroid's soot cannot find sources, while IccTa's soot does find them, with the same source (and sink)-definition file?
With kind regards,
Sebastiaan
Hello!
A little background
I am writing a framework to execute static android security analysis tools, and I would like to inlcude FlowDroid in it to show what it can do!
Issue
I have a (small) apk, which I test with to see if my framework works okay.
I found that Flowdroid does not work with my test apk:
My apk is malware, it has sources and sinks, confirmed by multiple analysers.
e.g.: I have used IccTa (with IC3), which also uses soot. There, I got a welcoming
I thought: Maybe it is because of the SourcesSinks definition text file (maybe IccTa uses more fitting source/sink rules for this apk), but: After launching flowdroid with the SourcesSinks-file of IccTa, the error persisted.
Question
Do you know, by any chance, how Flowdroid's soot cannot find sources, while IccTa's soot does find them, with the same source (and sink)-definition file?
With kind regards,
Sebastiaan